CVE

Id
35051  
CVE No.
CVE-2008-4934  
Status
Candidate  
Description
The hfsplus_block_allocate function in fs/hfsplus/bitmap.c in the Linux kernel before 2.6.28-rc1 does not check a certain return value from the read_mapping_page function before calling kmap, which allows attackers to cause a denial of service (system crash) via a crafted hfsplus filesystem image.  
Phase
Assigned (20081105)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
383569 35051 CVE-2008-4934 MLIST:[oss-security] 20081103 CVE requests: kernel: hfsplus-related bugs  View
383570 35051 CVE-2008-4934 URL:http://www.openwall.com/lists/oss-security/2008/11/03/2  View
383571 35051 CVE-2008-4934 CONFIRM:http://git.kernel.org/?p=linux/kernel/git/stable/linux-2.6.27.y.git;a=commit;h=649f1ee6c705aab644035a7998d7b574193a598a  View
383572 35051 CVE-2008-4934 CONFIRM:http://kernel.org/pub/linux/kernel/v2.6/testing/ChangeLog-2.6.28-rc1  View
383573 35051 CVE-2008-4934 DEBIAN:DSA-1687  View
383574 35051 CVE-2008-4934 URL:http://www.debian.org/security/2008/dsa-1687  View
383575 35051 CVE-2008-4934 DEBIAN:DSA-1681  View
383576 35051 CVE-2008-4934 URL:http://www.debian.org/security/2008/dsa-1681  View
383577 35051 CVE-2008-4934 MANDRIVA:MDVSA-2008:234  View
383578 35051 CVE-2008-4934 URL:http://www.mandriva.com/security/advisories?name=MDVSA-2008:234  View
383579 35051 CVE-2008-4934 REDHAT:RHSA-2009:0014  View
383580 35051 CVE-2008-4934 URL:http://www.redhat.com/support/errata/RHSA-2009-0014.html  View
383581 35051 CVE-2008-4934 REDHAT:RHSA-2009:0264  View
383582 35051 CVE-2008-4934 URL:http://rhn.redhat.com/errata/RHSA-2009-0264.html  View
383583 35051 CVE-2008-4934 UBUNTU:USN-679-1  View
383584 35051 CVE-2008-4934 URL:http://www.ubuntu.com/usn/usn-679-1  View
383585 35051 CVE-2008-4934 BID:32096  View
383586 35051 CVE-2008-4934 URL:http://www.securityfocus.com/bid/32096  View
383587 35051 CVE-2008-4934 OVAL:oval:org.mitre.oval:def:11635  View
383588 35051 CVE-2008-4934 URL:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:11635  View
383589 35051 CVE-2008-4934 SECUNIA:32510  View
383590 35051 CVE-2008-4934 URL:http://secunia.com/advisories/32510  View
383591 35051 CVE-2008-4934 SECUNIA:32918  View
383592 35051 CVE-2008-4934 URL:http://secunia.com/advisories/32918  View
383593 35051 CVE-2008-4934 SECUNIA:33180  View
383594 35051 CVE-2008-4934 URL:http://secunia.com/advisories/33180  View
383595 35051 CVE-2008-4934 SECUNIA:32998  View
383596 35051 CVE-2008-4934 URL:http://secunia.com/advisories/32998  View
383597 35051 CVE-2008-4934 SECUNIA:33556  View
383598 35051 CVE-2008-4934 URL:http://secunia.com/advisories/33556  View
383599 35051 CVE-2008-4934 SECUNIA:33858  View
383600 35051 CVE-2008-4934 URL:http://secunia.com/advisories/33858  View
383601 35051 CVE-2008-4934 XF:linux-kernel-hfsplus-dos(46327)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
48296 JVNDB-2008-003606 aegis および aegis-Web における任意のファイルを上書きされる脆弱性 aegis および aegis-Web には、(1) bng_dvlpd.sh、(2) bng_rvwd.sh、(3) awt_dvlp.sh、(4) awt_intgrtn.sh および (5) aegis.cgi スクリプトに関する処理に不備があるため、任意のファイルを上書きされる脆弱性が存在します。 CVE-2008-4938 35051 6.9 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-003606.html  View